HOTSPOT (Drag and Drop is not supported)Select the answer that correctly completes the sentence.Hot Area:
Answer(s): A
Box: are NOT assigned a Microsoft 365 Copilot licenseIn the Microsoft admin center, the Credits used metric in the Copilot credits report shows total credits used by users in your organization that _________ and are interacting with work grounded agent in Microsoft 365 Copilot chat.In the Microsoft 365 admin center, the Credits used metric in the Copilot credits report specifically tracks usage by unlicensed users (those without a Microsoft 365 Copilot license) who interact with agents in Copilot Chat.Key details about this metric include:Target Audience: It measures interactions from users in your organization who do not have a Microsoft 365 Copilot license.Billing Trigger: Credits are consumed when these users interact with agents that trigger the Copilot Studio meter.Inclusion for Licensed Users: For users with a Microsoft 365 Copilot license, many standard interactions (like Microsoft Graph grounding or generative answers in Teams) are zero-rated and do not count toward this credit meter.Credit Calculation: The number of credits depends on the agent's design and features. For example, a single prompt to an agent grounded in a tenant graph might use 12 credits (10 for grounding and 2 for the generative answer).Reporting Latency: You can typically view usage data within one hour of a user's interaction with a metered agent.To find this specific data, navigate to Reports > Usage and select the Microsoft 365 Copilot page, then the Copilot credits tab.
https://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/admin/activity-reports/ microsoft-365-copilot-credits.md
HOTSPOT (Drag and Drop is not supported)For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:
Box 1: NoNo - Users that are assigned a Microsoft 365 E5 license can create Microsoft 365 Copilot agents.Users with a Microsoft 365 E5 license cannot create Microsoft 365 Copilot agents by default. While the E5 plan is a qualifying base subscription, a separate Microsoft 365 Copilot add-on license is required to access agent creation and management features.Box 2: NoNo - Users must be assigned a Microsoft 365 E5 license to use the Analyst agent.Users do not need a Microsoft 365 E5 license specifically to use the Analyst agent.An active Microsoft 365 Copilot license is required.The Analyst agent is generally available for users with a Copilot license, enabling up to 25 combined queries per month.The Analyst agent is available in Microsoft 365 Copilot chat and is not available in the free version.Box 3: YesYes - Users can use a natural language prompt to create a Microsoft 365 Copilot agent.Users can create custom Microsoft 365 Copilot agents using natural language prompts through the Agent Builder feature within Microsoft 365 Copilot. This low-code/no-code approach allows users to simply describe the agent's purpose, and Copilot automatically generates the agent's name, description, and instructions.
https://licensing.guide/microsoft-365-vs-agent-365-licenses/ https://learn.microsoft.com/en-us/microsoft-copilot-studio/fundamentals-get-started
Your organization has a Microsoft 365 subscription.You need to investigate security incidents and alerts raised from the Windows 11 devices in your organization.What should you use?
Answer(s): D
Microsoft Defender for Endpoint in Microsoft 365 allows security teams to investigate, analyze, and remediate security incidents on Windows 11 devices via the Microsoft Defender portal (security.microsoft.com). It provides a unified experience to view device timelines, threat intelligence, and alerts, enabling automatic or manual response to threats like malware and phishing.
https://learn.microsoft.com/en-us/defender-xdr/investigate-incidents
You have a Microsoft SharePoint site as shown in the following exhibit.You need to view the settings of SLabel1.What should you use?
To examine or modify the settings of a specific sensitivity label, you must use the Microsoft Purview portal.While you can see which labels are applied to sites or files within the SharePoint admin center or document libraries, the actual configuration, definition, and security settings for the sensitivity label itself are managed exclusively in the Microsoft Purview portal.Where to go:Navigate to: Microsoft Purview portalGo to: Solutions > Information ProtectionSelect: Labels (or "Sensitivity labels")
https://learn.microsoft.com/en-us/purview/sensitivity-labels-teams-groups-sites
Your organization has a Microsoft 365 subscription.All users have Microsoft 365 Copilot licenses.You need to identify where sensitive content is being used during Copilot interactions, analyze the content usage patterns, and provide recommendations on applying the appropriate protections.What should you use?
Answer(s): B
To locate sensitive content used by Microsoft 365 Copilot, analyze its usage patterns, and receive actionable protection recommendations, you should use Microsoft Purview, specifically the Data Security Posture Management (DSPM) for AI dashboard.The Primary Tool: DSPM for AIThe Data Security Posture Management (DSPM) for AI (available within the Microsoft Purview portal) is the central hub for managing AI-related data risks. It is specifically designed to provide visibility into how Copilot and other AI applications interact with your organizational data.Locating Sensitive Content: The dashboard identifies and surfaces sensitive data (using sensitivity labels and sensitive information types) that Copilot could potentially access or use in its prompts and responses.Analyzing Usage Patterns: It provides insights and reports on AI activity, allowing you to see which users are interacting with Copilot, what type of content is being referenced, and whether those interactions involve sensitive data.Actionable Recommendations: DSPM for AI provides "one-click" policy recommendations. These guided workflows help you apply the appropriate protections directly from the insights discovered, such as:Protecting items with sensitivity labels from Copilot processing.Detecting risky AI interactions (such as prompt injection or unauthorized access).Implementing Data Loss Prevention (DLP) rules.
https://learn.microsoft.com/en-us/purview/ai-m365-copilot-considerations
Box: Microsoft Defender XDRYou can use ___________ to review threat indicators correlated across email, identity, and device incidents in a single view.Microsoft Defender XDR is a unified platform designed to automatically correlate threat signals--such as alerts and suspicious activities--from email, identity, devices, and cloud apps into a single, comprehensive view called an incident.
https://learn.microsoft.com/en-us/defender-xdr/microsoft-365-defender
Your organization has a Microsoft 365 subscription that contains a user named User1.User1 plans to leave your company in two weeks.You need to capture the activity of User1 to identify whether the user is exfiltrating data.Which Microsoft Purview solution should you use?
Answer(s): C
To capture a user's activity and check for data exfiltration using Microsoft Purview Insider Risk Management, follow these steps:1. Prerequisites and Licensing2. Initial Setup*-> 3.Create an Insider Risk PolicyNavigate to Solutions > Insider Risk Management > Policies in the Microsoft Purview portal.Select Create policy and choose a template focused on exfiltration, such as Data leaks or Data theft by departing users.Scope the policy: Under the Users and groups page, select Include specific users and groups and add the individual user you want to monitor.Select Indicators: Choose specific exfiltration indicators like downloading files from SharePoint, sending emails with attachments to external recipients, or copying data to USB devices.Triggering Events: Define what starts the monitoring, such as a Data Loss Prevention (DLP) policy match or a specific exfiltration activity.4. Monitor and Investigate
https://learn.microsoft.com/en-us/purview/insider-risk-management-configure
Box 1: YesYes - Microsoft Purview Compliance Manager provides a risk-based compliance score to help you understand your compliance posture.Microsoft Purview Compliance Manager provides a risk-based score that evaluates your organization's data protection and regulatory compliance (e.g., GDPR, ISO 27001) in real-time. It calculates your posture by awarding points for completed improvement actions--with higher weights on preventive controls--and provides actionable insights to prioritize risk reduction across Microsoft 365 and multi-cloud environments.Box 2: YesYes - Microsoft Purview Compliance Manager provides step-by-step guidance to remediate compliance issues.Microsoft Purview Compliance Manager provides step-by-step guidance to remediate compliance issues through actionable "improvement actions." These actions are designed to help organizations bridge the gap between regulatory requirements and technical implementation.Key ways Compliance Manager provides remediation guidance:Actionable Improvement Actions: The platform lists specific steps to take to improve your compliance posture, such as configuring retention policies, enabling auditing, or implementing data loss prevention (DLP) rules.Detailed Implementation Guidance: For each improvement action, the tool provides specific instructions and links directly to the corresponding solution in the Microsoft 365 or Azure portal, such as the Information Protection or Data Loss Prevention dashboards.Box 3: NoNo - Compliance Manager is part of Microsoft Defender.Microsoft Purview Compliance Manager is part of the Microsoft Purview suite, not directly Microsoft Defender.
https://learn.microsoft.com/en-us/purview/compliance-manager https://www.microsoft.com/en-us/security/blog/2021/01/14/simplify-compliance-and-manage-risk-with- microsoft-compliance-manager
Post your Comments and Discuss Microsoft AB-900 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AB-900 content, but please register or login to continue.